PT-2014-9095 · Mit+5 · Krb5+6

Tkuthan · Published 1970-01-01 · Updated 2024-06-15 · CVE-2014-4345

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions 1.6.x through 1.11.x before 1.11.6 MIT Kerberos 5 versions 1.12.x before 1.12.2 krb5 (affected versions not specified)

Description The issue is related to an off-by-one error in the krb5 encode krbsecretkey function in the LDAP KDB module in kadmind, which allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via a series of "cpw -keepold" commands. The vulnerability can be exploited remotely by an attacker who has passed the authentication procedure, leading to a violation of confidentiality, integrity, and availability of protected information.

Recommendations For MIT Kerberos 5 versions 1.6.x through 1.11.x before 1.11.6, update to version 1.11.6 or later. For MIT Kerberos 5 versions 1.12.x before 1.12.2, update to version 1.12.2 or later. For krb5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Out of bounds Read

Double Free

Weakness Enumeration

CWE-189

CWE-125

CWE-415

Related Identifiers

ALT-PU-2014-2418

BDU:2015-01984

BDU:2015-04296

BDU:2015-04297

BDU:2015-04298

BDU:2015-04299

BDU:2015-04300

BDU:2015-04301

BDU:2015-07299

BDU:2015-09203

BDU:2015-09790

CESA-2014_1389

CESA-2015_0439

CVE-2014-4345

DLA-37-1

DSA-3000-1

MGASA-2014-0345

OPENSUSE-SU-2024:10004-1

RHSA-2014:1255

RHSA-2014:1389

RHSA-2014_1255

RHSA-2014_1389

RHSA-2015:0439

RHSA-2015_0439

SUSE-SU-2014_1028-1

USN-2310-1

Affected Products

Alt Linux

Centos

Mit Kerberos 5

Red Hat

Suse

Ubuntu

Krb5

References · 128

• https://ubuntu.com/security/CVE-2013-6800 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4344 · Security Note
• http://rhn.redhat.com/errata/RHSA-2015-0439.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2014-1255.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136640.html · Vendor Advisory
• http://debian.org/security/2014/dsa-3000 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-4345 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-4345 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-4344 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2014-4345 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04300 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10004-1 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137056.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2015-0439.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4342 · Security Note